21 Worksheets for Workshop 1 & Workshop 2
WORKSHOP 1
🛡️ WORKSHEET 1
Antivirus: Real Alert or Scareware?
Ref. 1.1–1.2
Name: __________________________________________________
Date: __________________________________________________
Your trainer is showing two pop-ups on screen. Circle what's suspicious.
⚠️ CRITICAL SECURITY ALERT Your device has been infected with 14 viruses! Click SCAN NOW or call: +1-800-FIX-VIRUS ⏱ This warning will expire in: 02:37 |
Windows Security Virus & threat protection update available. Your definitions are 3 days old. We recommend running a quick update. Update now Remind me later |
What seems wrong?
________________________________________________________________________
________________________________________________________________________
If I see a scary pop-up, the FIRST thing I do is:
________________________________________________________________________
Open your phone now and tick what's true:
☐ My antivirus / Play Protect / Windows Security is active
☐ My device has no pending updates
☐ My screen lock (PIN, fingerprint, Face ID) is active
☐ I checked one app's camera/microphone permissions - and they made sense
🌟 One security habit I will start this week: ________________________________________________________________________ |
🎮 WORKSHEET 2
________________________________________________________________________
Digital habits: Safe or Unsafe?
Ref. 1.3–1.4
Name: __________________________________________________
Date: __________________________________________________
The game - your group's answers
Decide together: safe or unsafe?
Scenario | Safe / Unsafe? |
|---|---|
Download a free game from an unknown website | |
Install an app from the official App Store or Play Store | |
Pop-up: '57 viruses found! Click SCAN NOW!' | |
The OS asks you to install a security update | |
A calculator app requests access to contacts and microphone |
Do you think we need to download extra "cleaner" or "antivirus" apps from internet pop-ups?
☐ Yes, to be safer ☐ No, built-in phone security is enough
Verifying Before Downloading
Looking at the table above, what is your family's number one golden rule to make sure a new download is official and safe?
Our download rule:
________________________________________________________________________
If your child gets a frightening message saying their device is broken or infected:
Our family rule for scary messages will be:
________________________________________________________________________
🌟 One thing I learned today: ________________________________________________________________________ ________________________________________________________________________ |
👣 WORKSHEET 3
Data Online: What Are We Sharing?
Ref. 3.1
Name: __________________________________________________
Date: __________________________________________________
If a stranger saw your last month of social posts, what could they learn about your family?
________________________________________________________________________
Sort each type of information:
Information | Share publicly | Share carefully | Keep private |
|---|---|---|---|
Full name + city | ☐ | ☐ | ☐ |
Children's school name | ☐ | ☐ | ☐ |
Holiday photos (while still away) | ☐ | ☐ | ☐ |
Home address and postcode | ☐ | ☐ | ☐ |
Professional job title or field of work | ☐ | ☐ | ☐ |
The item that surprised me most:
________________________________________________________________________
🌟 One piece of information I will protect more carefully from now on: ________________________________________________________________________ ________________________________________________________________________ |
📱 WORKSHEET 4
The Permission Check
Ref. 1.3–1.5
Name: __________________________________________________
Date: __________________________________________________
Settings → Apps / Privacy → Permission Manager.
☐ Apps with Camera access: ______ Apps with Microphone access: ______
☐ I found at least one app I no longer use - I removed its permissions or deleted it.
☐ 'Find My Device' (or equivalent) is activated.
Tip: Group your apps into folders (e.g., by category) so it's easier to see what you actually use and delete what you don't need.
The app that surprised me most:
________________________________________________________________________
'When an app costs nothing, your children are not the customers - they are the product.'
One 'free' app my family uses, and what it might be collecting:
________________________________________________________________________
🌟 One thing I will change about how my family uses devices: ________________________________________________________________________ ________________________________________________________________________ |
🔑 WORKSHEET 5
Rank the Passwords
Ref. 2.1
Name: __________________________________________________
Date: __________________________________________________
Before seeing the answers, rank these from weakest (1) to strongest (4):
Password | My ranking | Why? |
|---|---|---|
123456 | ||
P@ssw0rd! | ||
Football22! | ||
BlueTrainRiverM0on. |
What makes a long passphrase stronger than a short one with symbols?
________________________________________________________________________
Build your 'Secret Story' passphrase
Leo (age 11 used a memory - a squirrel eating a blue popsicle - to build: BlueSquirrel8It!
My funny family memory:
________________________________________________________________________
My passphrase from it (add a number or irregular capitalisation to strengthen it):
________________________________________________________________________
🌟 My password rule from today onwards: ________________________________________________________________________ ________________________________________________________________________ |
🏠 WORKSHEET 6
The Password Reuse Trap
Ref. 2.2
Name: __________________________________________________
Date: __________________________________________________
Imagine every house on a street uses the exact same key. What happens if one is stolen?
________________________________________________________________________
How does this connect to using the same password on multiple accounts?
________________________________________________________________________
Do you reuse the same password anywhere? ☐ Yes ☐ No ☐ Not sure
Account | Unique password? | Update this week? |
|---|---|---|
Primary email | ☐ Yes ☐ No | ☐ |
Banking | ☐ Yes ☐ No | ☐ |
Social media | ☐ Yes ☐ No | ☐ |
Google/ Iphone Account | ☐ Yes ☐ No | ☐ |
The account I will update FIRST:
________________________________________________________________________
🌟 One thing I understood about password reuse today: ________________________________________________________________________ ________________________________________________________________________ |
🔐 WORKSHEET 7
Activating 2FA
Ref. 2.3
Name: __________________________________________________
Date: __________________________________________________
If a password is like the key to your front door, 2FA acts as:
☐ A second deadbolt ☐ A security guard checking IDs ☐ A security camera.
On your primary email: Security Settings → Two-Step Verification / 2FA. Tick as you go:
☐ I found the 2FA / Two-Step Verification section.
☐ I chose a method: ☐ SMS ☐ Authenticator App ☐ Passkey / biometric
☐ I completed activation and saved my recovery codes at home.
Unexpected Alert!
🔔 Sign-in request
Someone is trying to access your email from a device you don't recognise.
[Approve] [Deny]
You safely tapped Deny and blocked the access. However, your account is still at risk until you do one more essential thing.
What is your immediate next step?
________________________________________________________________________
🌟 One thing I learned today: ________________________________________________________________________ ________________________________________________________________________ |
🗄️ WORKSHEET 8
Password Managers: My Digital Vault
Ref. 2.4–2.5
Name: __________________________________________________
Date: __________________________________________________
Have you ever heard of a password manager?
☐ Yes, I use one ☐ Yes, but I've never used one ☐ No, never heard of it
☐ I set a Master Passphrase using the 'Secret Story' method.
☐ I saved at least one account into the vault.
Now let's set one up, step by step:
☐ Step 1 - Choose one: Bitwarden / your phone's built-in manager (Passwords app / Google) / Other: ______
☐ Step 2 - Download it, if you don't have it yet.
☐ Step 3 - Open it and create your Master Passphrase using the 'Secret Story' method.
☐ Step 4 - Save at least one account into the vault.
The ONE thing I must never forget when using it:
________________________________________________________________________
Teaching my child their 'Secret Key'
Like Leo's 'BlueSquirrel8It!' - what memory could my child use for their first passphrase?
________________________________________________________________________
🌟 The digital security habit I will teach my child first: ________________________________________________________________________ ________________________________________________________________________ |
🎣 WORKSHEET 9
Phishing: Spot the Fake
Ref. 3.2
Name: __________________________________________________
Date: __________________________________________________
Phishing - your group's answers
For each message, find the warning signs:
Message | Red flags I found |
|---|---|
Email: bank suspension warning Your bank account has been suspended due to suspicious activity. Verify your access immediately: secure-bank-login-update.com | |
SMS: delivery fee request Your package is held at the depot due to an unpaid €1.99 delivery fee. Click here to clear it: bit.ly/post-delivery-update | |
WhatsApp: IT support login request Hello, this is IT Support. We detected a security breach on your account. To secure it, reply with the 6-digit verification code you just received. |
Instead of clicking a link in an alarming message, what do I do?
________________________________________________________________________
_________________________________________________________________________
🌟 One thing I learned today: ________________________________________________________________________ ________________________________________________________________________ |
📋 WORKSHEET 10
My Workshop 1 Action Plan
Name: __________________________________________________
Date: __________________________________________________
☐ Update all devices and verify antivirus / Play Protect is active.
☐ Create a unique 'Secret Story' passphrase for my email.
☐ Activate 2FA on at least one key account.
☐ Check what I share publicly on social media.
☐ Teach my child the 'Secret Story' game.
One conversation I will have at home
The one security tip I want to pass on:
________________________________________________________________________
_________________________________________________________________________
Looking back at today
Which of the four modules will be hardest to actually put into practice - and why?
________________________________________________________________________
_________________________________________________________________________
🌟 My single most important security commitment from Workshop 1: ________________________________________________________________________ ________________________________________________________________________ |
WORKSHOP 2
📡 WORKSHEET 11
Public Wi-Fi and VPNs
Name: __________________________________________________
Date: __________________________________________________
The Wi-Fi Twin Trap
Look at the networks visible at the airport. Which one looks like an "Evil Twin" trap?
📶 Airport_Official_Gate4 📶 FREE_HIGH_SPEED_AIRPORT_WIFI
📶 Free_Airport_WiFi
You click to connect and you are asked to: "Log in with your Google Account to verify your identity". What just happened there?
☐ It's a standard security check by the airport provider.
☐ It's a Phishing Trap.
Wi-Fi Risk Map - my group's answers
Scenario | Risk level |
|---|---|
Watching YouTube on café Wi-Fi | ☐ Low ☐ Medium ☐ High |
Checking bank balance on airport Wi-Fi | ☐ Low ☐ Medium ☐ High |
Leaving AirDrop (Apple) or Quick Share (Android) set to "Everyone" while waiting at the hotel lobby. | ☐ Low ☐ Medium ☐ High |
Open your Wi-Fi settings now:
☐ I found and removed at least one old public network ('Forget This Network').
☐ My phone does not auto-connect to unknown networks.
☐ I will change my phone's Personal Hotspot password to a strong, custom one.
☐ I will update my home Wi-Fi password.
🔒 WORKSHEET 12
HTTPS: The Padlock Inspection
Ref. 3.5
Name: __________________________________________________
Date: __________________________________________________
HTTPS means the connection is encrypted. Does it also mean the website is trustworthy?
_________________________________________________________________________
_________________________________________________________________________
Website | Has padlock + HTTPS? | URL looks correct? |
|---|---|---|
☐ Yes ☐ No | ☐ Yes ☐ No | |
☐ Yes ☐ No | ☐ Yes ☐ No | |
☐ Yes ☐ No | ☐ Yes ☐ No |
Before entering personal data on any website, I will always:
________________________________________________________________________
________________________________________________________________________
🌟 One thing I learned today about website safety: ________________________________________________________________________ ________________________________________________________________________ |
🍪 WORKSHEET 13
Cookies: Our Digital Footprints
Ref. 3.1
Name: __________________________________________________
Date: __________________________________________________
You visit a website for the first time. Before you can continue, a message appears on the screen.
🍪 This website uses cookies
We use cookies to improve your browsing experience, personalise content and analyse website traffic.
what do you usually click?
☐ Accept All (Fast, but shares everything) ☐ Reject All / Manage Preferences
Have you ever clicked "Accept All" without reading the message?
☐ Yes
☐ No
If yes, why?
________________________________________________________________________
________________________________________________________________________
The Hidden Trap: Think About It!
Scenario: To watch the video, a website asks to install a cookie.
- If you block it, the video won't play.
- If you accept it, you are being tracked even after you leave the website.
What is the real risk here?
________________________________________________________________________
________________________________________________________________________
What would you do?
☐ Block it. My privacy is worth more than a video.
☐ Accept it. I just want to watch the video, even if they track me.
Read the list below and tick only the cookies you think are necessary.
☐ Remember my shopping cart
☐ Save my language preferences
☐ Measure website visits
☐ Personalised advertising
☐ Keep me logged in during this session
🌟 One thing I will pay attention to: ________________________________________________________________________ ________________________________________________________________________ |
📺 WORKSHEET 14
Smart Device: The 'Device Mute' Walk
Ref. 3.4
Name: __________________________________________________
Date: __________________________________________________
Identify every device with a microphone or camera, and check it:
Device | Has mic/camera? | Privacy checked? |
|---|---|---|
Smart TV | ☐ | ☐ Yes ☐ No |
Voice assistant | ☐ | ☐ Yes ☐ No |
Baby monitor / cam | ☐ | ☐ Yes ☐ No |
Laptop webcam | ☐ | ☐ Yes ☐ No |
Cloud backup - what's being saved?
Open your phone's cloud settings
(iPhone: Settings → [Name] → iCloud; Android: Settings → Google → Backup). Look at what's listed.
One thing you didn't know was being backed up:
________________________________________________________________________
________________________________________________________________________
One thing you would want to delete from the back up?
________________________________________________________________________
________________________________________________________________________
🌟 The smart device setting I will review this week: ________________________________________________________________________ ________________________________________________________________________ |
⏱️ WORKSHEET 15
The 'Device Basket' Challenge
Ref. 4.4–4.5
Name: __________________________________________________
Date: __________________________________________________
Do I check my phone during family meals or while my child is talking to me?
☐ Often ☐ Sometimes ☐ Rarely
Every family member - parents included - puts their device in a basket for 2 hours.
When will I try this?
________________________________________________________________________
What offline activity will we do instead?
________________________________________________________________________
🌟 The digital habit I will change first - and why: ________________________________________________________________________ ________________________________________________________________________ |
🤝 WORKSHEET 16
Our Family Digital Understanding
Name: __________________________________________________
Date: __________________________________________________
Complete this together with your family.
Where We Keep Devices
☐ Phones charge in the kitchen overnight, not in bedrooms.
☐ No devices at the table when we eat together.
☐ Tablets and laptops stay in shared spaces, not behind closed doors.
☐ We always ask a parent before downloading an app or game or browser extension.
☐ We never share passwords or 2FA recovery codes outside the family.
☐ We report suspicious messages before clicking.
☐ We only make purchases with a parent's knowledge and consent.
☐ We never share home address or school name online with strangers.
Parental commitments - rules that apply to adults too
☐ We will not use phones during family time without explaining why.
☐ We apply the same screen time rules to ourselves.
☐ Our rule for us: _______________________________________
Proposed by our child: _______________________________________
🌟 The most important rule in our Family Digital Understanding: ________________________________________________________________________ ________________________________________________________________________ |
🧒 WORKSHEET 17
Parental Controls: Monitoring, Invasion of Privacy
Ref. 4.2–4.3
Name: __________________________________________________
Date: __________________________________________________
Talk to your children and tell them before you install any parental controls.
iPhone: Screen Time → App Limits → Passcode → Downtime.
Android: Digital Wellbeing → daily timer.
Feature I configured: ______________________
Scenario | Monitoring or Spying? |
|---|---|
Parent installs Screen Time and shows the teenager exactly what it records | |
Parent installs a hidden app that logs all keystrokes without telling the child | |
Parent reads their 12-year-old’s private WhatsApp chats because they noticed a sudden change in their mood | |
Parent takes the child's phone while they are asleep and scrolls through everything just to check. | |
Parent uses location tracking to check if their teenager actually went to the library after school. | |
Parent sits with their 10-year-old once a week to review together the new apps or games downloaded |
What I will tell my child about the tools I use on their device:
________________________________________________________________________
🌟 The parental control feature that will make the most difference in my home: ________________________________________________________________________ ________________________________________________________________________ |
🚨 WORKSHEET 18
Cyberbulling: Would You Notice the Warning Signs?
Ref. 5.1–5.2
Name: __________________________________________________
Date: __________________________________________________
Imagine that your child is facing a serious problem online (like cyberbullying or grooming) but is too afraid or ashamed to tell you. They are trying to hide it. How would you notice?
Look at their mood, sleep, or school attitude. What changes would alarm you first?
________________________________________________________________________
Look at how they interact with their screen. What strange device habits might jump out?
________________________________________________________________________
Scenario my group analysed:
________________________________________________________________________
Warning signs present - and what a parent should do FIRST:
________________________________________________________________________
🌟 The warning sign I had never thought about before today: ________________________________________________________________________ ________________________________________________________________________ |
🎮 WORKSHEET 19
Gaming Scams and Rabbit Holes
Ref. 5.3–5.4
Name: __________________________________________________
Date: __________________________________________________
A teenager searched for home workouts; autoplay pushed him into increasingly extreme content over weeks. Warning signs of this drift:
________________________________________________________________________
The '5-Minute Game & Store Check'
🕹️ Step 1: Explore without judgment.
Sit with your child, open their favourite game, and ask them to show you around. Let them explain how it works, what they love about it, and who they play with. Just listen and learn!
🛒 Step 2: Check the shop together.
Go to the in-game store. Most expensive item: ______ Price in real money: ______
How many hours of real-world work does this represent?
________________________________________________________________________
What I will tell my child if a player offers a free in-game gift:
________________________________________________________________________
🌟 One thing I will discuss with my child about gaming this week: ________________________________________________________________________ ________________________________________________________________________ |
💛 WORKSHEET 20
LISTEN - REASSURE - DOCUMENT - ACT
Ref. 5.5
Name: __________________________________________________
Date: __________________________________________________
Scenario: "My child comes to me looking upset and says: 'Something happened online and I don't know what to do' They haven't told me what yet"
________________________________________________________________________
_________________________________________________________________________
Step | What I said / did |
|---|---|
🟡 LISTEN | |
🟢 REASSURE | |
📸 DOCUMENT | |
⚡ ACT |
Which step do you think is the hardest - and why?
________________________________________________________________________
_________________________________________________________________________
Why don't children always tell us?
What emerged in discussion - and one thing I could say to make my child feel safer asking for help:
________________________________________________________________________
_________________________________________________________________________
🌟 The sentence I will say to my child to make them feel safe telling me: ________________________________________________________________________ ________________________________________________________________________ |
💪 WORKSHEET 21
My Family Digital Resilience Plan
Ref. 5.5
Name: __________________________________________________
Date: __________________________________________________
Phase | What I will actually do |
Prevention - reduce initial exposure | |
Response - what to do when something happens | |
Recovery - rebuild trust after an incident |
Conversation starters for this week
☐ 'What would you do if someone sent you a mean message online?'
☐ 'Do you know how to block someone on the apps you use?'
☐ 'If something worrying happened online, would you feel safe telling me?'
☐ 'If you saw someone being cyberbullied or sharing something inappropriate online, how would that make you feel?
Use at the end of Workshop 2 or distribute as a take-home evaluation. Not part of the standard workshop flow.
📊 WORKSHEET 22
How Digitally Safe Is My Family? - Self-Assessment
Name: __________________________________________________
Date: __________________________________________________
Part 1 - Device Security (from Chapter III, section 7)
Tick every statement that is true for your family today:
☐ All devices in our home have up-to-date antivirus protection or built-in security software active.
☐ All devices are set to receive automatic system updates.
☐ All devices have a screen lock (PIN, password, fingerprint, or Face ID) activated.
☐ I know the difference between a real security alert and a scareware pop-up.
☐ I only download apps from official stores (Google Play, App Store).
☐ I regularly review and remove app permissions that are no longer necessary.
Part 2 - Passwords and Authentication
☐ I use a strong, unique passphrase for my primary email account.
☐ I do not reuse the same password across multiple accounts.
☐ I have activated Multi-Factor Authentication (2FA) on at least one key account.
☐ I know what to do if I receive an unexpected 2FA request I did not initiate.
☐ I have explored or set up a password manager.
Part 3 - Data and Network Safety
☐ I know which types of personal data to keep private and which are safer to share.
☐ I read cookie consent banners before accepting - I do not just click 'Accept All'.
☐ I can recognise the warning signs of a phishing message.
☐ I apply the 'Go to the Source' rule when I receive alarming messages.
☐ I understand the risks of public Wi-Fi and protect myself with a VPN when needed.
☐ I check the HTTPS padlock and the full URL before entering personal data on a website.
☐ I have reviewed the privacy settings on our Smart TV and voice assistants.
☐ I know what our cloud backup contains and who has access to it.
☐ My family has a written digital agreement with clear rules everyone knows.
☐ I have configured parental controls on my child's device.
☐ I know the warning signs that a child may be experiencing an online problem.
☐ My child knows they can come to me with any online problem without fear of punishment.
☐ I know the LISTEN–REASSURE–DOCUMENT–ACT response framework.
Total ticked: | / 23 | |
19–23 ✅ | Your family is well protected. Focus on maintaining and updating your habits. | |
13–18 🟡 | Good progress! Choose 3 gaps from above and address them this month. | |
Under 13 🔴 | You have taken important first steps. Go back through the workshop materials and set a 30-day plan. |
The 3 areas where I will focus my energy over the next 30 days:
1. ________________________________________________________________________
2. ________________________________________________________________________
3. ________________________________________________________________________
🌟 The single most important change I have made for my family's digital safety: ________________________________________________________________________ ________________________________________________________________________ |